# Logstash type disappeared from Elasticsearch
**URL:** https://discuss.elastic.co/t/logstash-type-disappeared-from-elasticsearch/15499
**Category:** Elasticsearch
**Created:** [January 30, 2014, 1:15pm UTC](https://discuss.elastic.co/t/logstash-type-disappeared-from-elasticsearch/15499 "2014-01-30T13:15:25Z")
**Posts on this page:** 4
**Page:** 1
### Author:  [@tom\_rkba](https://discuss.elastic.co/u/tom_rkba)
#### Post date: [January 30, 2014, 1:15pm UTC](https://discuss.elastic.co/t/logstash-type-disappeared-from-elasticsearch/15499/1 "2014-01-30T13:15:25Z")
Something happened around 0700 EST today where suddenly one of our data types dropped off our Kibana graphs. I am trying to figure out how to troubleshoot it and have some ideas.
First, redis-cli monitor shows events landing in redis. However, the file DB is filling up and is 10-30 GB depending upon the server. I am not sure how to see what is in the redis db.
Second, logstash does appear to be sending events and the missing type is configured (it worked until this morning).
I restarted everything (redis, logstash, elasticsearch and all shippers) and waited for the 2014-01-30 index. It is still not appearing. I do think the events are landing in ES based upon the traffic volume, but are somehow no longer searchable. How would I confirm that?
How do I determine the most recent event for that type using a curl query against ES? If the last event is many hours old, how do I get ES to tell me why it is failing?
--
You received this message because you are subscribed to the Google Groups "elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com).
To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/df0babe9-fc91-442c-8320-813b37f00156%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/df0babe9-fc91-442c-8320-813b37f00156%40googlegroups.com).
For more options, visit [https://groups.google.com/groups/opt\_out](https://groups.google.com/groups/opt_out).
---
### Author:  [@Binh\_Ly](https://discuss.elastic.co/u/Binh_Ly)
#### Post date: [January 30, 2014, 3:13pm UTC](https://discuss.elastic.co/t/logstash-type-disappeared-from-elasticsearch/15499/2 "2014-01-30T15:13:14Z")
Not sure what happened, but to answer your question about getting the most
recent event (just substitute with the right logstash index name below):
curl
"[http://localhost:9200/logstash-YYYY.MM.DD/\_search?size=1&sort=@timestamp:desc&pretty](http://localhost:9200/logstash-YYYY.MM.DD/_search?size=1&sort=@timestamp:desc&pretty)"
I would also check the ES logs directory to see if there is anything there
that will show possible cause of a problem within ES.
--
You received this message because you are subscribed to the Google Groups "elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com).
To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/34ee6a06-45b6-4a7e-90a0-55b616bd5412%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/34ee6a06-45b6-4a7e-90a0-55b616bd5412%40googlegroups.com).
For more options, visit [https://groups.google.com/groups/opt\_out](https://groups.google.com/groups/opt_out).
---
### Author:  [@tom\_rkba](https://discuss.elastic.co/u/tom_rkba)
#### Post date: [February 28, 2014, 3:44pm UTC](https://discuss.elastic.co/t/logstash-type-disappeared-from-elasticsearch/15499/3 "2014-02-28T15:44:19Z")
I think this had something to do with the Marvel beta code. ES came back
up properly with the index once I uninstalled the marvel beta plugin and
cleaned the ES config file.
--
You received this message because you are subscribed to the Google Groups "elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com).
To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/544e0298-41c1-4e36-a472-04ff5c352d0b%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/544e0298-41c1-4e36-a472-04ff5c352d0b%40googlegroups.com).
For more options, visit [https://groups.google.com/groups/opt\_out](https://groups.google.com/groups/opt_out).
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [July 6, 2017, 1:46am UTC](https://discuss.elastic.co/t/logstash-type-disappeared-from-elasticsearch/15499/4 "2017-07-06T01:46:34Z")